Making things a little more difficult to run exploits on compromised WordPress sites

I was called in to fix a number of WordPress sites that had been hacked. Many were running older versions of WordPress and thankfully weren’t running SetUID, so, the damage was limited to exploit scripts running in some of the world writeable directories. After cleaning up the sites, upgrading them to the latest version of […]